Hi, is it possible to use "passdb backend = ldapsam" and have account policies and group mapping information in local tdb files on a standalone samba 3.6/4.1 server? i have a readonly ldap server where lots of samba attributes are missing. these weren't needed for existing setups with samba 3.6, but now i want to use samba 4.1 and to extend functionality (Windows ACLs). i want to bother our LDAP admin as little as possible since this LDAP tree wasn't designed for samba only and serves lots of other purposes. furthermore even write attempts to LDAP are bad because of redirects happening from LDAP replication slave to LDAP write master (where i can't write either). this doesn't stop samba from working but slows down its operation a lot. i've seen this happening with ldapsam_set_account_policy() in the logs. thx for looking into this maybe "unfavourable" setup matthias